This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json) Hash identifier: cN9+kxeIZFZFWVOFQPZpIEUxF49JwxEFJ7ke+RUYm5k= Subject key identifier: E8:BD:B6:BB:28:05:76:28:50:D7:3E:B6:31:E7:A2:51:B4:B6:75:A2 Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d Certificate serial: 019AF57857D8F45C7CBC0C94F33901C3C10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 21:01:35 +0000 Manifest this update: Sat 06 Dec 2025 21:01:35 +0000 Manifest next update: Sun 07 Dec 2025 21:01:35 +0000 Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: GI4JCnfnXAYjL3jzP7pIDGRyR/QS2X0POw1ryYU88uU=) 2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=) 3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:57:d8:f4:5c:7c:bc:0c:94:f3:39:01:c3:c1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d Validity Not Before: Dec 6 21:01:35 2025 GMT Not After : Dec 7 21:01:35 2025 GMT Subject: CN=e8bdb6bb2805762850d73eb631e7a251b4b675a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:22:0a:8c:d6:9f:75:b3:69:e4:01:17:74: 83:82:29:9f:14:21:31:ca:51:14:f6:cb:be:ea:b8: ce:34:e6:08:03:cf:bd:1e:1a:64:35:40:5d:ef:b7: 59:8b:5e:eb:a3:c9:3c:52:96:a3:01:03:06:e6:37: 70:e4:6f:6a:2a:39:af:f3:88:ad:8c:9c:c9:d3:cb: b7:33:e3:c4:2b:c8:04:aa:81:10:82:89:b2:78:0d: 82:33:21:2a:32:4d:1d:c8:71:06:3a:29:af:9b:5a: 42:e7:01:88:c8:f0:88:21:f2:de:b3:cb:77:f4:a9: 28:8e:3f:6f:7f:b2:b9:95:cc:3b:ba:6f:c2:9c:5b: ce:87:9b:0d:48:50:41:76:d6:6d:65:90:f3:24:5f: fa:83:44:67:d1:0d:c9:f1:c8:c1:da:02:48:d9:d6: f5:61:ab:0e:ca:a5:37:90:85:4b:32:86:c2:a5:c0: e7:bc:1d:57:fc:e1:9b:24:82:ff:e0:ce:06:16:d8: a4:bc:c9:d0:ab:04:83:1f:8e:4d:4c:68:10:f3:ee: f0:5b:68:55:f9:9c:20:45:52:f2:c5:ae:82:6d:87: 49:a2:3d:f6:20:15:48:13:26:a9:8c:b5:58:ae:3f: 64:3b:6a:0c:2e:16:db:08:76:70:05:36:78:af:08: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BD:B6:BB:28:05:76:28:50:D7:3E:B6:31:E7:A2:51:B4:B6:75:A2 X509v3 Authority Key Identifier: keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fd:74:22:f3:6f:a6:61:11:b1:11:b1:5f:9b:1a:2b:cc:a7: d7:29:92:e4:67:49:4f:c8:e7:e5:4b:f9:58:d1:fe:d6:ae:b9: e6:8a:b7:cd:88:2b:e2:4e:d2:92:b5:3f:30:77:c8:06:9f:25: 30:8e:6d:8f:84:51:3b:1d:24:64:13:46:f1:3c:6d:3d:c0:8d: e3:59:9c:bc:54:bd:ac:06:c6:19:e9:ec:8b:1c:ba:16:9a:cd: a1:53:29:44:70:ff:76:17:ef:d2:ae:1e:9e:98:65:cb:74:fa: bf:7b:19:93:74:1a:96:86:ef:db:b4:73:be:53:a2:57:9b:6d: d2:ae:cf:4a:a2:74:11:94:0a:25:e8:f8:d0:8b:3d:87:ee:69: 99:21:34:1e:96:f1:3d:44:12:26:ac:19:55:c9:27:bd:df:28: ab:52:52:b7:72:a6:69:49:71:6a:ed:0b:95:9a:4c:b5:81:ea: de:cd:3f:be:91:0f:3b:7b:c1:e9:06:08:f2:2d:45:d2:21:5d: 74:6e:6b:62:03:e7:10:39:75:09:a5:dc:52:19:71:3a:7b:f6: 20:67:ac:f9:f2:20:f8:98:8c:71:9b:c2:d8:d7:56:3f:1e:00: cf:a4:43:59:fa:01:62:25:fb:e1:cb:c0:93:e7:a3:57:17:1d: 0c:3a:44:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFfY9Fx8vAyU8zkBw8EPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjFlMmU0YzUwOGM2YzdhOThiNjU5ODUyODc0NWM4MTNm YWQzMWQwHhcNMjUxMjA2MjEwMTM1WhcNMjUxMjA3MjEwMTM1WjAzMTEwLwYDVQQD EyhlOGJkYjZiYjI4MDU3NjI4NTBkNzNlYjYzMWU3YTI1MWI0YjY3NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdoiCozWn3WzaeQBF3SDgimfFCEx ylEU9su+6rjONOYIA8+9HhpkNUBd77dZi17ro8k8UpajAQMG5jdw5G9qKjmv84it jJzJ08u3M+PEK8gEqoEQgomyeA2CMyEqMk0dyHEGOimvm1pC5wGIyPCIIfLes8t3 9Kkojj9vf7K5lcw7um/CnFvOh5sNSFBBdtZtZZDzJF/6g0Rn0Q3J8cjB2gJI2db1 YasOyqU3kIVLMobCpcDnvB1X/OGbJIL/4M4GFtikvMnQqwSDH45NTGgQ8+7wW2hV +ZwgRVLyxa6CbYdJoj32IBVIEyapjLVYrj9kO2oMLhbbCHZwBTZ4rwixzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi9trsoBXYoUNc+tjHnolG0tnWiMB8GA1UdIwQY MBaAFOKx4uTFCMbHqYtlmFKHRcgT+tMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2Et NTQzZDYxODJlMjk0LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2EtNTQzZDYxODJlMjk0 LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/10IvNv pmERsRGxX5saK8yn1ymS5GdJT8jn5Uv5WNH+1q655oq3zYgr4k7SkrU/MHfIBp8l MI5tj4RROx0kZBNG8TxtPcCN41mcvFS9rAbGGensixy6FprNoVMpRHD/dhfv0q4e nphly3T6v3sZk3Qalobv27RzvlOiV5tt0q7PSqJ0EZQKJej40Is9h+5pmSE0Hpbx PUQSJqwZVcknvd8oq1JSt3KmaUlxau0LlZpMtYHq3s0/vpEPO3vB6QYI8i1F0iFd dG5rYgPnEDl1CaXcUhlxOnv2IGes+fIg+JiMcZvC2NdWPx4Az6RDWfoBYiX74cvA k+ejVxcdDDpE8g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:03 2025 by rpki-client